| शीर्षक | Campcodes Complete Online Beauty Parlor Management System V1.0 Cross Site Scripting |
|---|
| विवरण | A cross-site scripting (XSS) vulnerability exists in the /admin/customer-list.php file of the Complete Online Beauty Parlor Management System. The application fails to properly sanitize or encode the name parameter before reflecting it back into the webpage. As a result, attackers can inject malicious JavaScript payloads that are executed in the victim’s browser once the crafted URL is accessed.
This flaw enables arbitrary script execution within the context of the affected web application, allowing attackers to bypass access controls and manipulate client-side behavior. |
|---|
| स्रोत | ⚠️ https://github.com/Abxery/cveee/issues/8 |
|---|
| उपयोगकर्ता | abxery (UID 91725) |
|---|
| सबमिशन | 15/11/2025 01:27 PM (11 महीनों पहले) |
|---|
| संयम | 20/11/2025 06:03 PM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 333084 [Campcodes Complete Online Beauty Parlor Management System 1.0 /admin/customer-list.php name क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|